it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Moritz Muehlenhoff <jmm AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 4627-1] tomcat9 security update
- Date: Fri, 17 Jul 2020 18:07:40 +0000
- List-archive: https://lists.debian.org/msgid-search/20200717180740.GB25682 AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From: Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=mZKuIDL791fItcQNgPJkjoWBIpZIeKjKjG8TJ4CLcoc=; b=Ze 2XaTCBRCHAwqcfZTzDr7vwaFLymi4VHToPcq0pAE8uyhBL8lvlfhIPenXS7d53TOXTZI2RB5MUZXg KBVoCj0VExOBqsStAwHI8vGFfg1br+59YgsCV37O+VwFz6xkB6bBFzOj1cIf1eRxq27puhf0XfwQ8 ccclkU+lWjrfY1ULxgru0XM6YJJyHDyA8CWysTLxqNYsDxiVyR9I+6ZtroDN6a921Y1l6NqL22vqO HZEYTrnY7y+wtlTvA8jNhY2lUFHK9uL50Zx9L1duvYR0YC0hrDlOhSe6KSSzESgLcMvfPp/mfAMor E8ntB0prhVXZxSvIvdcl7oW2DZzO60cw==;
- Old-return-path: <jmm AT seger.debian.org>
- Priority: urgent
- Resent-date: Fri, 17 Jul 2020 18:08:00 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <cJyFDOPZs9M.A.ewH.AkeEfB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-4727-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
July 17, 2020 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : tomcat9
CVE ID : CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935
Several vulnerabilities were discovered in the Tomcat servlet and JSP
engine, which could result in code execution or denial of service.
For the stable distribution (buster), these problems have been fixed in
version 9.0.31-1~deb10u2.
We recommend that you upgrade your tomcat9 packages.
For the detailed security status of tomcat9 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tomcat9
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=E8Ei
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 4627-1] tomcat9 security update, Moritz Muehlenhoff, 17.07.2020
Archiv bereitgestellt durch MHonArc 2.6.19.